Finish MariaDB/MySQL roles

• We need to generate the default root pwd and store it
• The .cnf is only suitable for local dev and not parameterisable
• General tidy wouldn't go amiss!